Users
Managing the accounts of an instance, which is for administrators, and reading any account's picture.
List people
Every account's login name, display name, color and role, readable by any signed-in account so everyone can see who takes part. Managing accounts, and their language and creation date, is /api/v1/users, which requires an admin.
List users
Create a user
Change a user's role, profile or public sharing, and/or reset the password
Delete a user
Remove another account's picture (owner only)
Set another account's picture (owner only)
The square to keep, as x,y,size: x and y place its top-left corner as fractions of the upright image's width and height, size is its side as a fraction of the shorter side. Absent keeps the centered square.
Disconnect a user from the identity provider
Admin only, under the rank rule of a password reset. Ends every session of the user. Allowed even when the user has no password; issue a setup link afterwards so they can sign in again.
Issue a one-time setup link for a user, replacing any open one
Revoke a user's open setup link
Read an account's picture
/api/v1/settings/sign-in PUT
Runs OpenID discovery at the issuer first and stores nothing when no provider answers (422 on body.issuer). Takes effect on the next request.
/api/v1/people GET
Every account's login name, display name, color and role, readable by any signed-in account so everyone can see who takes part. Managing accounts, and their language and creation date, is /api/v1/users, which requires an admin.